DevSecOps Engineer

TROOP is a group meeting planning and travel management platform that helps companies bring teams together for in-person meetings. The experience starts with TROOP’s award-winning Intelligent Destination Recommendations, which use advanced algorithms to help meeting planners pinpoint the perfect meeting destination, considering travel time, climate impact, budget, lodging availability, and safety factors for all attendees.

Using TROOP, companies have saved millions in travel costs, employee time, and carbon emissions, making it possible for people to meet and build stronger relationships with their colleagues, clients, and partners, even in times of tightening budgets and travel restrictions.

Why TROOP?

TROOP believes in the power of shared experiences and the unifying impact of in-person meetings. We are on a mission to bring people together by transforming the meeting planning process.

At TROOP, we have ambitious goals to be the leading provider of end-to-end meeting planning tools. We started by inventing a completely new way for people to decide where to meet, but for us, the destination is just the beginning. We’re developing more innovative solutions that make it easier than ever to organize and host successful group meeting experiences.

TROOP's Culture?

TROOP is an international, remote-first company. Our colleagues are spread across the globe, with entities in Spain, South Africa, the UK, and the United States. Our culture is rooted in an African philosophy called "Ubuntu," which means "I am because we are." It refers to an environment of interdependence through trust. We call ourselves TROOPers, and we are people who seek adventure, challenge the status quo, enjoy innovating, and want to be part of something special. We are doers who roll up our sleeves and get into the details; we own the problem and only stop once it is solved.

TROOP is hiring for a DevSecOps Engineer who combines technical expertise with a deep understanding of security and compliance frameworks. In this role, you will be a critical link between our technical teams, clients, and stakeholders, driving security best practices within the development lifecycle and ensuring our compliance with industry and regulatory standards.

What you’ll be doing:

• Client Interaction & Collaboration

  • Engage with clients to understand their security requirements, compliance needs, and privacy expectations.

  • Act as a trusted advisor to clients on DevSecOps best practices, security architecture, and compliance strategies.

  • Facilitate security and compliance discussions with internal teams, clients, and stakeholders to ensure alignment with security goals and objectives.

• Compliance Management

  • Lead the implementation and management of compliance frameworks.

  • Develop and maintain Policy-as-Code to enforce compliance policies within the CI/CD pipeline, ensuring security controls are applied consistently across environments.

  • Conduct regular compliance audits, vulnerability assessments, and risk analyses to identify and mitigate potential compliance issues.

  • Establish, document, and maintain security policies, including a Written Information Security Program (WISP).

• Bounty Program Oversight

  • Manage bug bounty programs, serving as the primary point of contact for vulnerability submissions and ethical hacker interactions.

  • Triage and prioritize reported vulnerabilities, coordinating with development and security teams for swift remediation.

  • Implement feedback loops to integrate insights from bug bounty reports into our security practices, minimizing recurring vulnerabilities.

• GDPR and Privacy Requirements

  • Implement and maintain data protection practices in line with GDPR and other privacy regulations, focusing on areas such as data encryption, access control, and data minimization.

  • Automate processes to handle data subject rights requests, such as data erasure and portability, in compliance with GDPR requirements.

  • Conduct Privacy Impact Assessments (PIAs) and ensure privacy-by-design principles are integrated into the development lifecycle.

• Security Automation and Infrastructure

  • Develop and implement automated security testing within CI/CD pipelines, including static analysis, dynamic analysis, and dependency scanning.

  • Integrate security tools to automate vulnerability detection, access control, configuration management, and compliance monitoring.

  • Continuously improve security policies, processes, and tools, adapting to new threats and changing regulatory requirements.

• Legal and Regulatory Liaison

  • Collaborate with legal and compliance teams to interpret new regulations and understand their impact on the business and product development.

  • Maintain up-to-date knowledge of relevant legal and regulatory requirements and proactively drive necessary changes in DevSecOps practices.

  • Serve as a security and compliance resource for legal inquiries, audits, and regulatory reporting.

Requirements

• Experience & Qualifications:

  • Min 5+ years in DevSecOps, Security Engineering, or a related role, with a strong background in security practices within the DevOps lifecycle.

  • Proven experience managing compliance frameworks

  • Relevant security qualifications

  • Experience working in fast-paced startup environments

• Technical Skills:

  • Proficiency in security automation tools, including SAST, DAST, container security, and configuration management.

  • Strong knowledge of CI/CD tools (GitLab CI) and infrastructure as code (Terraform).

  • Experience with cloud platforms (GCP, AWS) and containerization technologies (Kubernetes) with a focus on security and compliance.

• Compliance & Legal Knowledge:

  • Familiarity with data privacy regulations, especially GDPR, and experience in implementing privacy-by-design principles.

  • Understanding of bug bounty program management and experience working with external researchers or bounty platforms.

  • Ability to translate legal and regulatory requirements into actionable security policies and controls within the DevSecOps environment.

• Soft Skills:

  • Excellent communication and interpersonal skills, with the ability to explain complex security concepts to non-technical stakeholders and clients.

  • Strong problem-solving skills with a proactive and solution-oriented mindset.

  • Ability to work collaboratively with cross-functional teams, including development, legal, and client-facing teams.

Benefits

💻 Remote-first within our hubs: TROOP operates remotely with frequent in-person engagements, focusing on scaling within our legal entities in Spain, South Africa, the US, and the UK.

🚀 Join the Pioneering Team: As part of the initial team at TROOP, you'll be at the forefront of an extraordinary adventure. Picture yourself shaping the future of a fast-growing technology company where your ideas and contributions truly make a difference.

🎨 Discover an Incredible, Supportive Team and Diverse Culture: Prepare to be amazed by the exceptional individuals who form TROOP's team. Collaborate with brilliant, multicultural minds, where diverse backgrounds unite for unparalleled collaboration.

📈 Supported by Top Investors: TROOP's remarkable journey is backed by prestigious investors, such as the Madrona Group. Join forces with a company that has garnered the trust and support of the best in the industry. Read more about TROOP's Executive Chairman Steve Singh (Co-founder of Concur).

🤝 Possibility to become a shareholder: The ultimate advantage at TROOP. By owning shares, you actively shape the company's future, share in its success, witness astounding growth, and enjoy a long-term investment that aligns your personal triumphs with TROOP's achievements. 

🩺 Healthcare Insurance: Healthcare insurance is provided and managed through a local provider, with specific details varying depending on the legal entity.

⏰ Paid Time Off: We provide a generous PTO policy of 23 days per year, allowing you ample opportunity to relax, recharge, and have some well-deserved fun.

💜 Access to TalkLife: We offer access to “Talk Life” as a 100% free, anonymous platform where employees connect with others at any time for peer-to-peer support, offering and receiving advice, empathy, and encouragement regarding any situation on their mind. It is a complement to professional help and is available 24/7.

💚 Mental Health Support Budget: Yearly budget assistance for mental health support for all our employees.

☀️ Unforgettable Adventures: At our company, we cherish the bonds we create and the time we spend together. So, as a special treat, we believe in celebrating our team's hard work and dedication. Each year, we embark on an incredible one-year trip to a surprise location courtesy of TROOP.  You'll have the opportunity to explore new cultures, create lasting memories, and bond with your colleagues in a unique and exciting way.